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O-f Abstract. We show that on an n — 24m + 8fc-dimensional even 

unimodular lattice, if the shortest vector length is > 2m, then 



as the number of vectors of length 2m decreases, the secrecy gain 
increases. We will also prove a similar result on general unimodular 
lattices. Furthermore, assuming the conjecture by Belfiore and 
Sole, we will calculate the difference between inverses of secrecy 
gains as the number of vectors varies. Finally, we will show by an 
example that there exist two lattices in the same dimension with 
the same shortest vector length and the same kissing number, but 
different secrecy gains. 

1. Introduction 
Belfiore and Oggier defined in [T] the secrecy gain 

Xa = max 

ym,o< y <dA{yi) 

where 

e A ( z ) = ^V i|N|2z 

as a new lattice invariant to measure how much confusion the eaves- 
dropper will experience while the lattice A is used in Gaussian wiretap 
coding. The function Ha(?/) = & ®2(yi) * s ca U e d the secrecy function. 
Belfiore and Sole then conjectured in [2] that the secrecy function at- 
tains its maximum at y = 1, which would then be the value of the 
secrecy gain. Ernvall-Hytonen j6] proved this all known (and for some 
possibly existing) extremal lattices), and derived a method to prove or 
disprove the conjecture for any given unimodular lattice. The secrecy 
gain was further studied by Oggier, Sole and Belfiore in jH] and by Lin 
and Oggier in [8j. 

Recently, Lin and Oggier considered unimodular lattices in dimen- 
sions 8 < n < 23 [7], and furthermore, they considered the dependence 
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of the secrecy gain on the kissing number K(A) of the lattice. They 
proved that in dimensions 16 < n < 23, for non-extremal lattices the 
secrecy gain is given by 

1 

^ A ~~ i 2n | 2n(n-23)+X(A) ' 
1 - 25" H ^ 

In particular, in this case, they proved that the smaller the kissing 
number, the better the secrecy gain. 

The question whether one can use kissing number to find the best 
secrecy gain in general, is not that straightforward to answer: In some 
cases, the kissing number determines the secrecy gain, but not always. 

We prove that if an even unimodular lattice in dimension n = 24m + 
8k (k G {0, 1, 2}) has the shortest vector length > 2m, then the secrecy 
gain increases as the number of vectors of length 2m decreases (ie. 
when the kissing number decreases, or as a limit case: when there are 
no vectors of length 2m but the shortest vector length is 2m+2, i.e. the 
lattice is extremal). In particular, this shows that the secrecy gain is 
better on extremal lattices than on lattices with vectors of length 2m. 
We will also prove a similar theorem on odd lattices: if all vectors are 
of length at least [|J , then the secrecy gain increases as the number of 
vectors of length [|J decreases. It would be possible to prove that if all 
the vectors are of length > [~J +1, then the secrecy gain is better than 
if the shortest vector length is [~J . However, since all the lattices with 
shortest vector length [|J + 1 are known, this would not give any new 
information past the comparisons in article [7] (see jl] for why there 
are very few lattices like this). 



2. Preliminaries 

For information on theta function, one can study the book [10] by 
Stein and Shakarchi. For an extensive source on lattices, one may be 
referred to the book [5j by Conway and Sloane. However, to increase 
the readability of the current article, we will briefly recall the basic 
facts. 
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Define first the following theta functions: 

oo 

2 ( r ) = e^ /4 - q 2n )(l + q 2n )(l + g 2n ~ 2 ) 

71=1 

OO 

^(r)=n( i -^ 2n )( i +^ 1 ) 2 

71=1 

oo 

^(r)=n( i -? 2n )( 1 -^ 1 ) 2 - 

71=1 

Notice that $3 is the theta function of the lattice Z n . A lattice A is 
called unimodular if its determinant = ±1, and the norms are integral, 
ie, ||x|| 2 G Z for all vectors x G A. Further, it is called even, if ||x|| 2 is 
even for all x G A. Otherwise it is called odd. A lattice can be even 
unimodular only if the dimension is divisible by 8. Odd unimodular 
lattices exist in all dimensions: Z n is an example of such. 

Theta functions of even unimodular lattices in dimension n = 24m + 
8k (k G {0, 1, 2}) can be written as polynomials 

m 

= El m+k + J2bjEl im ' j)+h A j , 
j=i 

where E± = \ (#f + i?§ + #f) and A = ^e^^^I- Here E 4 is an Eisen- 
stein series, and A a discriminant function. 

Generally, theta functions of unimodular lattices in dimension n = 
8fj,+ v {y G {0, 1, . . . , 7}) can be written as polynomials: 

e A = ^a^r 8 '-A^, 

r=0 

where Ag = ^^2^4- Notice that this gives an alternative representation 
for theta functions of even lattices. 

We call an even lattice extremal, if the shortest vectors are of length 
2m + 2. Earlier, the definition of an extremal lattice stated that a 
lattice is extremal if the shortest vectors are of length [|J +1. However, 
Conway, Odlyzko and Sloane were able to show that there are very few 
extremal lattices with this definition, and they all exist in dimensions 
< 24 [4J. 

3. Increasing the secrecy gain by decreasing the number 

of short vectors 

In this section, we will prove two theorems, first of which corresponds 
to even lattices, and the second one to all unimodular lattices. 
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Theorem 1. Let A be an even unimodular lattice in the dimension 
n = 24m + 8k with k 6 {0, 1, 2} with the shortest vector length > 2m. 
Let k2m > be the number of vectors of the length 2m. Then the secrecy 
gain increases as k2 m decreases. Assuming the conjecture by Belfiore 
and Sole, the difference between the inverses of the secrecy gains of two 

ok 

lattices with A; 2m and k' 2m vectors of length 2m, is {k 2m — k' 2m ) ^L+k ■ 

By letting k 2m = in the previous theorem, we have the following 
special case: 

Corollary 2. The secrecy gain of an n-dimensional extremal even uni- 
modular lattice, when n = 24m + 8k (k 6 {0, 1, 2} ), is better than the 
secrecy gain of any even n-dimensional unimodular lattice with shortest 
vector length 2m. 

Let us now move to the proof of Theorem [TJ 

Proof, the theta series of the lattice can be written as a polynomial of 
the Eisenstein series E\ and the discriminant function A: 

in 

6 = El m+k + bjE 3im - j)+k A j . 

3=1 

Ernvall-Hytonen showed in [6] that the secrecy gain is the maximal 
value of 

^(1 - zf m+k + J2 ^ji 1 - z) 3(rn ~ j)+k z 2 ^ 

in the range z E (0, |] . Now we need to find how this expression 
changes when the kissing number changes. Write 

E%A j = q 2 > + a h , m 2 ^ 2 + a h , h2 q 2 ^ 4 + • ■ ■ , 

where q = e m . If the theta function of an even unimodular 24m + 8k- 
dimensional (k G {0, 1, 2}) lattice is of the form 

1 + k 2m q 2m + ■ • • , 

then to derive the coefficients bj, we have to solve the following system 
of equations: 

O-3m+k,0,l + b\ = 
&3m+fc,0,2 + &l£J3(m-l)+fc,l,l + b 2 = 
< a 3m+fc,0,3 + &ltt3(m-l)+fc,l,2 + ^203( m _2),2,l + ^3=0 

a 3m+k,0,m-l + &ltt3(m-l)+fc,l,m-2 + ' ' ' + ^m-2a3+fc,m-2,l + = 

0-3m+kfi,m + ^l«3(m-l)+A;,l,m-l + " " ' + ^m-lflfc,m-l,l + b m = &2 m 
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From this system of equations, it is clear that bi, b 2 , • • • , &m-i depend 
only on the coefficients a^-^ for suitable values of h), and not on 
the number k 2m . We may write 

b m = k 2m — ((l3 m+ kfl,m + &lG3(m-l)+fc,l,™-l + ' ' ' + &m-l<2fc, m -l,l) • 

Let us now compare the secrecy gains of lattices A and A'. Assume 
k 2m > k' 2m . Denote the corresponding coefficients bj and b'j, respec- 
tively. Then bj = b'j, when j < m, and 

— ^2m ( a 3ra+fc,0,m 4" ^l a 3(m— l)+k,l,m— 1 + ••• + 6 

m— l^fc,m— l,l) 

— (&2m' — («3m+fc,0,m + &lfl3(m-l)+fc,l,m-l + ' ' ' + b m -ldjt,m-l,l)) 

Now the secrecy function of the lattice A can be written and estimated 
in the following way: 




= E A '(y), 



which proves the first claim. 

Let us now move to the proof of the second claim. Assuming that 
the secrecy gain conjecture holds, the secrecy gain is obtained at y — 

1. Recall -4^(1) = i- Now we just need to calculate the difference 
S^(l) " S^(l): 
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and now the proof is complete. □ 

One may also prove the following theorem: 

Theorem 3. Let A be an odd unimodular lattice in the dimension 
n with the shortest vector length [|J . Let the number of vectors of 
length [|J be h. Then, when h decreases, the secrecy gain increases. 
Furthermore, assuming the conjecture by Belfiore and Sole, if lattices 
A and A' have h and h! vectors of length |_|J , respectively, then the 
difference of the inverses of the secrecy gains is ^ffj- 

Furthermore, one could formulate a similar corollary as in the case of 
even lattices. However, since all the lattices with shortest vector length 
[|J + 1 are known, this doesn't give any new information compared to 

17J- 

Proof. Since the proof of Theorem [3] is similar to the proof of Theorem 
[U we will only sketch the proof to point the differences. 

Since the theta function of any unimodular lattice has the polynomial 
representation 

LtJ 

writing 

$jAg = q s + c r ^q s+1 + c r ^ 2 q s+2 + • • • , 
we get the system of equations 

a = 1 

a O c n,0,l + 0-1=0 

aoc„ A l» j + aic n _ 8>1) ^ j _! + ••■ + a ^ j = h. 

We may now proceed just like in the proof of the previous theorem. To 
prove the second part of the theorem, we work just like in the proof of 
the previous theorem. We use the polynomial expression for the inverse 
of the secrecy function: 



* -E 



16 r m r 

r=0 6 

and notice that in the difference between the inverses, only the last 
terms in the polynomials remain. Their difference is 

(h-h') /tf^xLfJ 
leltT' \ W 
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If the conjecture by Belfiore and Sole holds, then the maximum is 
obtained at y — 1, i.e. = then the difference becomes 

h-h! 



4 5 LiJ ' 

which completes the proof. □ 

4. Same kissing numbers, different secrecy gains 

We will show that the extremal even unimodular lattice in dimen- 
sion 40 with shortest vector length 4 and kissing number 39600 has a 
different secrecy gain than the odd unimodular lattice in dimension 40 
with the same shortest vector length and kissing number. This lattice 
is also extremal, in the sense that it has the longest shortest vectors. 

It was showed in [6j that the 40-dimensional even unimodular lattice 
satisfies the secrecy gain conjecture. Let us use the methods from 
there to find the actual value of the secrecy gain. The extremal even 
unimodular lattices in dimension 40 have theta series are of the form 

I + 39600g 4 + • • • . 

The theta function of the lattice can also be written as 

El - 1200^A, 

and therefore, the secrecy gain is the maximal value of the function 
((I — z) 5 — y§2t 2 ( 1 — z) 2 ) on the interval (0, |] , which is obtained at 
z = \, and this value is -pp 

Consider now the odd unimodular lattices in dimension 40 with theta 
series of the form 

1 + 39600g 4 + 1048576g 5 + • • • . 

More on these odd lattices can be found at [3]. Comparing coefficients, 
we see that if the theta function of a unimodular lattice is of the form 

I + 39600g 4 + 1048576^, 

then the theta function can be represented as (see |3]) 

- 80tff A 8 + 1360^ 4 A^ - 2560^ 6 A| + 20480^ A 4 . 

Using the method from [6], we'll see that it is sufficient to show that 
the polynomial 

1360 9 2560 o 20480 4 

1 - 5z H —z —z 6 H -r-z 

I6 2 I6 3 16 4 

obtains its minimal value on the interval (0, |1 at z = ~, and then to 
compute the inverse of this value. 
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To show that the polynomial obtains its minimum at z = |, let us 
first differentiate it. The derivative is 

- (2z 3 - 3z 2 + 17z-B)<- (2z 3 + 17 z - 8) < - f — + — - 8 ) < 
8 V ; ~ 8 V ' ~ 8 V64 4 J 

on the interval z G (0, |1. Hence, the polynomial obtains its minimum 
at z — j, and this value is J^. Hence, the secrecy gain is 
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